Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa
File:                     feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa (raw, json)
Hash identifier:          1VtKDy0NnVGWK+J8ior3R9er6+JBCpKDAMwv8yOkvdA=
Subject key identifier:   CA:47:F6:BC:92:E8:09:09:CC:E4:3F:6E:E6:E4:B5:38:32:35:8B:5E
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0C0617
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa
Signing time:             Sat 13 Jun 2020 18:58:20 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Sun 03 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.47.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0c:06:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  3 05:00:00 2030 GMT
        Subject: CN=ec5d559d-7dfe-4e4d-90ae-dd61ebf2555c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:92:f5:0b:74:b7:bc:5e:96:a9:9a:7b:83:
                    a2:d2:de:81:cb:7d:a2:b2:fa:12:69:57:31:ac:8d:
                    dd:67:d5:b5:60:3f:bd:64:38:76:6c:03:bf:32:ed:
                    68:93:74:6e:39:14:b9:4e:42:b6:1e:91:9d:02:a8:
                    89:5a:9e:dc:92:d4:dd:09:b0:ad:aa:3b:b9:07:ca:
                    c8:ce:b4:9b:18:00:7a:5f:dc:86:4b:0e:45:b7:40:
                    b3:1a:0b:ba:10:47:7f:b6:7f:89:f8:e2:b6:55:8e:
                    f2:99:78:b2:e2:f4:12:60:f4:41:bb:b9:85:c1:df:
                    0d:9e:73:75:a9:fc:ee:46:d5:0f:0e:a2:34:68:1c:
                    28:dd:8e:2a:95:05:e2:2a:41:a1:4c:41:ac:f8:12:
                    71:29:4d:47:4a:a7:6b:7d:60:60:b5:f9:37:ad:0e:
                    14:34:fa:cd:47:4c:2a:7b:6f:e2:5c:b1:9a:b3:be:
                    db:e6:bd:6a:3a:63:8b:7d:df:3a:b6:ac:c3:6b:60:
                    9e:d1:8e:40:0e:25:84:b9:06:c6:86:b7:75:78:e1:
                    c0:2e:97:2a:d4:44:64:bd:96:35:7e:0b:35:30:3f:
                    3c:73:ff:d6:ed:58:2c:2d:aa:00:31:27:86:6f:96:
                    01:5f:f7:e0:dc:74:14:b0:39:ac:59:34:3a:b0:42:
                    6d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:F6:BC:92:E8:09:09:CC:E4:3F:6E:E6:E4:B5:38:32:35:8B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d7:9e:9b:1c:11:7d:9f:04:da:d3:f5:c2:0d:2a:1f:2d:f2:
         4d:9b:66:c5:1f:6b:91:9f:49:1b:cc:9f:d1:b3:06:ab:dd:83:
         93:f5:c0:e5:34:b5:6d:d5:3c:f7:e1:2b:31:a5:2b:b2:00:c5:
         3c:d3:72:de:15:20:4e:2c:61:d0:72:0f:bd:b2:99:7d:b5:46:
         f2:f0:22:1e:e1:43:6b:70:07:91:18:dc:4e:f3:7d:02:4a:a9:
         86:41:25:07:bd:9b:1b:da:8f:80:73:48:1e:cf:8d:49:72:9d:
         95:b4:e3:a6:d8:01:8f:67:7d:cd:eb:db:0d:51:b7:3e:37:42:
         d8:e3:89:9f:4f:3c:02:e7:a7:e8:f4:2a:01:b1:56:b8:cd:21:
         07:18:e7:9f:a4:1e:20:7b:de:03:f2:5a:09:29:be:98:19:fe:
         4d:d4:0f:f2:cf:ad:9f:0f:af:8a:2b:e7:36:f2:03:42:ca:e2:
         65:65:1f:ce:87:24:8f:bf:a8:a2:3b:51:e5:3d:57:dc:75:ca:
         7b:d4:bd:45:81:46:04:dd:bd:41:a4:af:0e:2f:27:68:ad:39:
         0b:5a:4c:ac:b2:fc:9d:b7:f7:e0:8e:55:7d:04:d2:eb:ce:db:
         c0:f4:fa:a3:23:16:24:6d:24:21:6f:15:a0:76:e9:17:2f:e5:
         cc:4f:90:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org